Broadcom Cloud SWG Administration Technical Specialist (250-622) Certification Sample Questions

01. A broad traffic bypass rule excludes a network range, but one sensitive application within that range must still be inspected. What should the administrator configure?
a) An Always Intercept exception
b) A report-only reviewer role
c) A disabled audit log rule
d) A Data Center reassignment

02. Which two areas should be validated before enabling Universal Policy Enforcement for a production environment?
(Choose two)
a) Report chart color
b) Policy compatibility
c) Supported enforcement points
d) Reviewer display name

03. A company wants managed smartphones to receive mobile threat protection and send web traffic through Cloud SWG. Which integration is most relevant?
a) Reviewer role with report access
b) Hosted Reporting with audit export
c) HRI with disposable isolation
d) SEP Mobile with Cloud SWG

04. A sales engineer demonstrates user authentication from a non-corporate network without relying on a fixed-site location. Which portal variation best fits this demonstration?
a) Roaming Captive Portal
b) Standard Captive Portal
c) Express Connect
d) Proxy Forwarding

05. A company wants unknown files to be analyzed before users can download them. Which service capability is most relevant?
a) Report export service
b) Malware Analysis Service
c) Captive Portal branding
d) Reviewer approval queue

06. A security team wants to tune endpoint protection without overblocking business traffic. Which two actions are most appropriate?
(Choose two)
a) Disable all malware protections
b) Block every uncategorized site forever
c) Review threat logs and matched policies
d) Test rules with representative users

07. A customer wants group-based policy for remote users without browser-based authentication challenges. Which prerequisite should be met?
a) Auth Connector or SAML is configured
b) Reviewer role is assigned to users
c) HRI is enabled for every category
d) Reporting dashboards are exported

08. An organization must inspect non-web TCP and UDP traffic in addition to common web traffic. Which service capability should be considered?
a) Report Reviewer role
b) Cloud Firewall Service
c) Agent update history
d) Audit log export

09. A new integration blocks legitimate uploads after being enabled for all users. What should the administrator do first?
a) Delete all report history before testing
b) Disable all Cloud SWG services permanently
c) Review matched policies and DLP verdicts
d) Remove authentication from every policy

10. Which two methods are valid fixed-site access approaches for sending location traffic to Cloud SWG?
(Choose two)
a) VPN/IPsec
b) Report template
c) Reviewer role
d) Express Connect